$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3690958b-35c8-4741-851e-c76de3333075.roa File: 3690958b-35c8-4741-851e-c76de3333075.roa (raw, json) Hash identifier: s4Csn58MK88zPKVN5AzIPIC88//VwJCRcCf2mVAlpE4= Subject key identifier: 0D:59:FF:1E:7D:F1:40:7C:95:5E:C0:E8:E5:3B:CB:BA:3D:2D:1C:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24AF3B37DA25581B41392DF141DCC24DDEC08F39 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3690958b-35c8-4741-851e-c76de3333075.roa Signing time: Mon 22 Sep 2025 18:45:28 +0000 ROA not before: Mon 22 Sep 2025 18:45:28 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:af:3b:37:da:25:58:1b:41:39:2d:f1:41:dc:c2:4d:de:c0:8f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:45:28 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=328714caf56df37d3882d8f2b7d1134a98b3ca758c3274b8f3363047fcbc7bb5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:07:cc:07:f1:2f:41:52:2e:1b:25:8e:4a:45: 87:3e:a6:68:5c:37:49:cb:53:c4:31:63:32:51:79: 0d:11:d0:30:42:c9:08:f8:18:63:b0:77:53:c0:64: ca:58:29:36:58:f1:13:f3:38:76:f6:2f:99:84:9e: c5:68:8d:3d:7e:ab:0b:a4:ab:c2:6d:d1:b2:33:ed: b8:1a:00:53:2a:eb:33:84:84:2b:a8:00:10:a8:dd: 4f:2b:6f:fc:df:1c:f1:a7:52:c8:70:47:04:7e:d0: a5:71:ce:3b:bb:f3:43:4c:2d:79:88:f1:91:9e:7e: 33:ff:b8:7c:51:c9:c9:63:10:dd:2a:b9:a4:fc:0c: 14:f6:ed:d2:c5:aa:e5:bf:ea:2e:43:38:94:cd:50: d9:71:98:5f:17:fe:bb:1e:b7:fc:a9:b1:b3:97:0b: 6c:70:58:66:77:b3:e2:7d:3f:83:98:55:3b:46:cb: 58:e1:3f:17:98:59:31:c1:dc:92:64:0c:e6:fa:29: 18:8f:15:7c:ca:d7:b8:e5:d7:b9:29:30:85:47:2b: ff:1d:b2:f7:e9:87:8f:35:17:49:11:27:c3:e1:0e: f2:49:54:96:a8:48:4b:22:f5:7e:dd:e5:37:b3:11: 65:f0:d0:5c:87:2c:36:9b:16:a5:d1:4d:cc:9c:ee: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:59:FF:1E:7D:F1:40:7C:95:5E:C0:E8:E5:3B:CB:BA:3D:2D:1C:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3690958b-35c8-4741-851e-c76de3333075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.174.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:7b:d3:42:ff:3b:46:d3:14:11:4c:f2:5a:f8:f4:18:23:b7: 46:c9:5b:bf:37:38:c4:49:fa:21:cc:76:31:21:9a:01:e1:fd: a0:6f:4b:66:f3:ab:96:5e:bd:58:25:7f:82:f2:5d:bd:78:79: de:aa:9b:29:b9:e7:0b:0a:0c:4a:d6:f9:48:e7:77:0a:bc:f4: ea:50:9d:de:a6:c7:73:b3:20:62:33:03:06:56:03:d8:66:fe: e7:bd:16:3a:71:a8:bd:87:3a:6e:c4:a3:d6:29:72:4d:51:55: 04:64:e9:94:32:99:57:c0:42:d4:76:c6:ad:a4:16:9d:5c:65: a9:4c:35:7b:7b:86:cb:50:58:17:af:db:2b:4f:57:5d:97:5f: 61:58:9a:b4:96:d9:26:bb:29:9a:a9:dc:11:b5:b3:5f:47:b4: e4:23:3d:a6:bc:ff:3c:b3:9c:3a:af:c5:dc:6c:2d:38:fc:8e: 49:9a:98:f5:d8:64:43:e3:62:57:ed:f1:fe:9b:b1:69:21:ec: 20:e0:4f:bd:49:76:cd:16:d5:f6:e2:c0:55:cf:35:fc:cb:06: 25:9e:0d:32:1a:83:8f:17:9e:36:19:92:67:8f:d7:61:07:5c: 1f:d7:2a:d7:ef:5f:82:76:d9:92:3a:70:f8:c6:07:df:4f:24: 6a:45:0e:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJK87N9olWBtBOS3xQdzCTd7AjzkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTg0NTI4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjg3MTRjYWY1NmRmMzdkMzg4MmQ4ZjJiN2QxMTM0YTk4 YjNjYTc1OGMzMjc0YjhmMzM2MzA0N2ZjYmM3YmI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsB8wH8S9BUi4bJY5KRYc+pmhcN0nLU8QxYzJReQ0R0DBC yQj4GGOwd1PAZMpYKTZY8RPzOHb2L5mEnsVojT1+qwukq8Jt0bIz7bgaAFMq6zOE hCuoABCo3U8rb/zfHPGnUshwRwR+0KVxzju780NMLXmI8ZGefjP/uHxRycljEN0q uaT8DBT27dLFquW/6i5DOJTNUNlxmF8X/rset/ypsbOXC2xwWGZ3s+J9P4OYVTtG y1jhPxeYWTHB3JJkDOb6KRiPFXzK17jl17kpMIVHK/8dsvfph481F0kRJ8PhDvJJ VJaoSEsi9X7d5TezEWXw0FyHLDabFqXRTcyc7psdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDVn/Hn3xQHyVXsDo5TvLuj0tHIUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM2OTA5NThiLTM1YzgtNDc0MS04NTFlLWM3NmRlMzMzMzA3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoK4wDQYJKoZIhvcNAQELBQADggEBAE1700L/O0bTFBFM8lr49Bgjt0bJ W783OMRJ+iHMdjEhmgHh/aBvS2bzq5ZevVglf4LyXb14ed6qmym55wsKDErW+Ujn dwq89OpQnd6mx3OzIGIzAwZWA9hm/ue9FjpxqL2HOm7Eo9Ypck1RVQRk6ZQymVfA QtR2xq2kFp1cZalMNXt7hstQWBev2ytPV12XX2FYmrSW2Sa7KZqp3BG1s19HtOQj Paa8/zyznDqvxdxsLTj8jkmamPXYZEPjYlft8f6bsWkh7CDgT71Jds0W1fbiwFXP NfzLBiWeDTIag48XnjYZkmeP12EHXB/XKtfvX4J22ZI6cPjGB99PJGpFDqk= -----END CERTIFICATE-----Generated at Sat Oct 18 02:37:59 2025 by rpki-client